Soroush Dalili – Computer Security Is My Interest!
Soroush Dalili's blog – بلاگ سروش دلیلی
Home
About Me
Advisories
Contact Me
FAQs
Links
Projects
Cross Site Request Forgery (CSRF) PoC Template (by Javascript)
Excel Advanced Search Add-In Application
The Web Application Security Consortium Threat Classification v2.0
On January 4, 2010, in
Normal Posts
,
Security Posts
, by Soroush Dalili
Tagged with:
WASC Threat Classification v2.0
•
Web Application Security Consortium Threat Classification
Microsoft Contradiction
On January 3, 2010, in
Security Posts
, by Soroush Dalili
Tagged with:
Microsoft IIS Vulnerability
Browsers’ Pain: A recursive function!
On December 25, 2009, in
Security Articles
,
Security Posts
, by Soroush Dalili
Tagged with:
Browsers’ Pain
•
Mozilla Crash Function
Microsoft IIS Semi-Colon Vulnerability
On December 25, 2009, in
My Advisories
,
Security Posts
, by Soroush Dalili
Tagged with:
Execute ASP by JPG
•
IIS File Extension Security Bypass
•
IIS semicolon bug
•
IIS semicolon vulnerability
•
Microsoft IIS Vulnerability
•
Run ASP by JPG
My belief: 70% of websites are vulnerable
On November 29, 2009, in
Security Articles
,
Security Posts
, by Soroush Dalili
Tagged with:
Critical vulnerabilities
•
CSRF Attacks
•
OWASP top 10
•
SQL Injection Vulnerability
•
website vulnerability
•
XSS Vulnerability
Previous Entries
Next Entries
Categories
My Advisories
(8)
Normal Posts
(22)
Security Articles
(17)
Security Posts
(31)
Recent Posts
Drag and Drop XSS in Firefox by HTML5 (Cross Domain in frames)
“Advisories” has been updated
Flash ExternalInterface.call() JavaScript Injection – can make the websites vulnerable to XSS
Travian Game Patch – Finally!
Unrestricted File Download V1.0 – Windows Server
Tags
All Facebook Application Walls
block ip
block isp
Blog Template
by using iMacros
close advertisment
computer science vulnerabilities
credit card algorithm
credit card algorithm is equal to IMEI algorithm
Critical vulnerabilities
CSRF Attacks
educational bug finding
Facebook Add Friend
Facebook Automatic Friend Add
Facebook Automation Friend
Facebook Game Cheat
FaceBook MobWars Cheat
final project article
free web hosting
ftp vulnerabilities
hacking videos
IMEI algorithm
javascript to close advertisements
java vulnerabilities
logical flaw
Microsoft IIS Vulnerability
National ID Code Algorithm
National ID Code JavaScript
Phishing attacks
Privacy
soroush dalili
sql injection tutorial
travian game
travian hack
travian online game
university of birmingham vulnerabilities
Web application security in ASP
Web application security in ASP - (simple) JSP
Web application security in JSP
weblogs
website vulnerability
XSS
XSS Vulnerability
الگوریتم کد ملی
کد ملی
OWASP Feeds
Microsoft Anti-XSS Library Bypass (MS12-007)
January 19, 2012
The Ascendancy of the Application Layer Threat - SYS-CON Media (press release) (blog)
January 19, 2012
XMLHttpRequest Level 2 Draft Published
January 18, 2012
Cursorjacking again
January 18, 2012
Year Of Security for Java – Week 3 – Session Cookie Secure Flag
January 18, 2012
Symantec Security News
LUA: Non-existent Distribution causes actual Distribution to fail.
January 20, 2012
Question about SEp move from one machine to another
January 20, 2012
DLP - Incident Details & Smart Responses
January 20, 2012
Deploying a new client in SEP 12.1
January 20, 2012
Replication Partner
January 20, 2012
New Vulnerabilities
Vuln: Pligg CMS 'status' Parameter SQL Injection Vulnerability
December 29, 2012
Vuln: HP OpenView Network Node Manager Multiple Remote Code Execution Vulnerabilities
January 20, 2012
Vuln: Apache Tomcat Hash Collision Denial Of Service Vulnerability
January 20, 2012
Vuln: OpenStack Nova Image Registration Arbitrary Input Validation Vulnerability
January 20, 2012
Bugtraq: DC4420 - London DEFCON - 24 January 2012
Bugtraq: InfoSec Southwest 2012 Open Registration
Bugtraq: [Suspected Spam] Barracuda Spam/Virus WAF 600 - Multiple Web Vulnerabilities
Bugtraq: Webcalendar 1.2.4 'location' XSS
More rss feeds from SecurityFocus
Twitter
LinkedIn